In this lab we will deploy a Identity and Access Management policy that can be used by Access Policy Manager. Be sure to review the following documentation before continuing:

• Referencing Bundled Policies
• Execution Flow

3.4.1. IAM Policy Deployment via Bundled Resource

1. Create a new deployment with the following values:

   Field Name	Value
   Name	Lab3.4
   Template	appsvcs_integration_v2.0.003_custom
   Virtual Server: Address	10.1.20.34
   `Virtual Server: Port <AppSvcsiAp p_presoref.html# preso-pool-port> `__	80
   Pool: Pool Table	Row 1: Index: 0 Monitor(s): 0
   Pool: Members	Row 1: Pool Idx: 0 IP/Node Name: 10.1.10.100 Port: 80 Row 2: Pool Idx: 0 IP/Node Name: 10.1.10.101 Port: 80
   Monitor: Monitor Table	Row 1: Index: 0 Name: /Common/http
   Virtual Server: Client-side L4 Protocol Profile	/Common/tcp-wan-optimized
   Virtual Server: Server-side L4 Protocol Profile	/Common/tcp-lan-optimized
   Virtual Server: HTTP Profile	/Common/http
   Virtual Server: Access Profile	use-bundled
   Virtual Server: Bundled Items	Row 1: Resource: <select the resource from the dropdown that begins with ‘apm:’ that matches the BIG-IP version you are using>

   
   

2. Click the ‘Finished’ button to deploy the template and monitor the deployment log

3. The initial objects in the Components view does not represent the final state of the deployment as detailed in Execution Flow

4. Monitor the deployment log and wait for the postdeploy_final process to complete

5. Review the deployed configuration using the iApp Components view

   • Notice the APM policy was deployed and linked to the Virtual Server with an object name of ‘bundled_apm_policy’

3.4.2. IAM Policy Deployment via URL

Note

As mentioned previously only one APM policy can be deployed at a time. We will replace the policy deployed previously with one loaded from a URL.

1. Click iApps -> Application Services -> Lab3.4 -> Reconfigure

2. Modify the following values and click ‘Finished’:

   Field Name	Value
   Virtual Server: Bundled Items	Row 1: Resource: <select the appropriate item from below> 11.5: apm:url=http://<web server IP>/app svcs/remote_apm_11_5.conf.tar.gz 11.6: apm:url=http://<web server IP>/app svcs/remote_apm_11_6.conf.tar.gz 12.0: apm:url=http://<web server IP>/app svcs/remote_apm_12_0.conf.tar.gz 12.1: apm:url=http://<web server IP>/app svcs/remote_apm_12_1.conf.tar.gz

   
   

3. Click the ‘Finished’ button to deploy the template and monitor the deployment log

4. Monitor the deployment log and wait for the postdeploy_final process to complete

5. Review the deployed configuration using the iApp Components view

6. Review the deployed configuration using the iApp Components view

   • Notice the APM policy was deployed and linked to the Virtual Server with an object name of ‘bundled_apm_policy’